aceAI-powered malware ‘highly likely’ to be used to hack UK infrastructure by 2028
AI-powered malicious software is “highly likely” to be used in hacking attacks against the UK’s power stations, airports and hospitals by 2028, according to the state cybersecurity body. The National Cyber Security Centre (NCSC) said AI will probably enable a ransomware attack against critical national infrastructure [CNI] between now and 2028. The UK’s definition of CNI covers a range of facilities and services across sectors including energy, transport, defence, food, health and finance. The warning from the N…
The NCSC judges that AI-powered malware will very likely be used in a ransomware attack on UK critical infrastructure by 2028, as AI helps attackers find targets, locate network weaknesses and write malicious code.
The central claim is a forecast of what is likely by 2028, not an observed attack, and the article gives no figures on how many incidents to expect.
Evidence
- JournalismThe Guardian2026-11-03
How should this claim be treated?
Truvace Impact Record TRV-2026-2346, v1: “AI-powered malware ‘highly likely’ to be used to hack UK infrastructure by 2028.” Truvace, 2026-11-03. /record/TRV-2026-2346 (accessed at citation time). sha256 30d4d0ccae339c2b…
Calibration history
Every change to this record since certification, in the open. None yet — the reading has held since it entered the record.
Certified into the record
How to verify without trusting this page
Fetch the canonical text of any version from /api/record/TRV-2026-2346 and hash it yourself — for example shasum -a 256 on the saved canonical field. The result must equal content_hash, and each version’s text ends with prev:followed by the prior version’s hash (version 1 chains to 64 zeros). If a single character of any version had been altered since certification, the chain would not reproduce.